change user in CAS serviceResponse element

[Cantor, Scott]

On 7/10/15, 4:41 PM, "users on behalf of Scott Koranda" <users-bounces at shibboleth.net on behalf of skoranda at gmail.com> wrote:

>What is a high-level summary of the approach to only apply
>such a post-login c14n flow for a single relying party?

Like the authentication stuff, there's a master list of the flows to run in c14n/subject-c14n.xml.

There's no complicated process to select them like with authentication, it just runs them in series until a non-error event is signaled back.

The flow descriptors have an activationCondition property, which people are I think getting familiar with. Normally that's pre-populated by a condition bean that checks the Subject for the right content to operate on (like the X.500 flow checks for the right kind of principal and/or a certificate). You could attach a condition to check the relying party (much like Liam was working on for the resolver per discussion on the list).

Since I don't know what your flow would need to do, I don't know if the existing ones are usable. If it's an attribute lookup, which it sounds like it might be, you could uncomment the first one in the list (c14n/attribute) and configure it, along with attaching the condition. So possibly no code needed.

-- Scott